Privacy Policy

Overview

KindaBroke may be available in supported countries. Features, billing, and availability may vary by location. This policy applies to information collected through the website, app, and support interactions related to the service.

Data Collected

We collect the following categories of information when you use the service:

• email address
• name / display name
• budgeting data
• expenses, income, categories
• IP address
• device / browser information
• cookies
• analytics events
• crash / error logs
• support messages

Data Not Collected

The service is not designed to collect the following categories of information:

• bank account login credentials
• Plaid data
• stored payment card numbers
• government ID uploads
• Social Security numbers
• third-party account passwords

How Data Is Used

We use collected information to create and manage accounts, provide budgeting features, process applicable subscriptions, respond to support requests, maintain service performance, and investigate misuse or security issues.

We do not activate nonessential analytics until you make a consent choice that permits them.

Sharing of Data

We may share data with service providers that help us operate the service and with parties when disclosure is required by law or reasonably necessary to protect the service, users, or others.

We do not promise that data will never be disclosed where disclosure is legally required or operationally necessary.

Third-Party Providers

The following third-party providers may process data in connection with their services:

Supabase provides authentication and database services. Stripe processes payment and subscription information where paid billing is available; KindaBroke does not store full payment card numbers.

• Supabase (authentication and database)
• Vercel (hosting, deployment, analytics)
• Stripe (subscriptions and billing)
• Resend (email delivery)
• Google Analytics (analytics)
• GitHub (code hosting)

Cookies & Analytics

Essential storage may be used to operate authentication and core service features. Nonessential analytics are enabled only after the applicable consent decision and may involve providers such as Vercel and Google Analytics.

You can change your analytics choice at any time using Analytics preferences in the site footer. Withdrawing consent stops future optional analytics activity on that browser; it does not retroactively erase information already processed.

Data Retention

We keep information for as long as reasonably necessary to provide the service, maintain records, investigate issues, meet legal obligations, or enforce our terms.

Retention periods vary by data type and purpose. After account deletion, minimal operational or security records may remain only for the minimum period reasonably necessary for security, compliance, fraud prevention, dispute handling, or legal purposes.

Payment processors may retain transaction, fraud-prevention, accounting, tax, or legally required records under their own obligations and policies. Deleting KindaBroke does not require Stripe to erase records it must or is permitted to retain.

Data Security

Encryption in transit is handled by third-party providers.

Encryption at rest is handled by third-party providers.

Logging and monitoring are used to help operate and protect the service.

Multi-factor authentication is not currently available.

No system can be guaranteed to be completely secure, and no security outcome is guaranteed.

Account Deletion

You can permanently delete your account through Profile → Danger Zone by entering your current password and typing DELETE exactly.

Account deletion removes the KindaBroke authentication identity and application data. Minimal internal records may be retained only for the minimum period reasonably necessary for security, compliance, fraud prevention, dispute handling, or legal purposes.

Where an active KindaBroke subscription exists, account deletion includes immediate subscription cancellation. Account deletion does not itself promise an automatic refund, and processor-retained payment records may remain as described above.

User Rights

You can access your account information in the service, correct editable profile information, download the available personal-data export, and delete your account through Profile → Danger Zone.

Depending on where you live, applicable law may provide additional rights concerning access, correction, deletion, restriction, objection, portability, or complaints to a data-protection authority. Contact us for requests that are not available through the product; we may need to verify your identity before responding.

Children's Privacy

The service is not directed to children under 13.

If we learn that we have knowingly collected personal information from a child under 13 in a manner not permitted by law, we may take steps to delete that information.

International Processing

KindaBroke may be available in supported countries. Features, billing, and availability may vary by location.

KindaBroke and its service providers may process information in the United States or other countries where they operate. Privacy protections and government-access rules may differ from those in your country. We do not claim that the service is available or legally suitable in every jurisdiction.

Changes

We may revise this Privacy Policy from time to time. The updated version will apply when posted with a revised effective date.

Contact

For privacy-related questions or requests, contact us using the details below.

• Legal: feedback@web54.dev
• Support: feedback@web54.dev
• Mailing address available upon request.